Can i know who all the users have executed which command on a machine?
Upvotes: 0
Views: 98
Reputation: 5582
In Microsoft world that would be audit (entries in the security event log).
http://technet.microsoft.com/en-us/library/cc751315.aspx
See the Process Tracking section.
Upvotes: 0
Reputation: 755114
On a Unix-type machine, you would have to enable process accounting. The kernel would then write a record for each process that terminates indicating which command was executed, by whom, when, and how long it took to a file. You could then analyze the file.
The Linux HOWTO was updated in 2001 - it is likely to apply still, but you will need to check.
Upvotes: 1